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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

Responsive to communication(s) filed on 12 July 2001 . 
2a)D This action is FINAL. 2b)E] This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) K Claim(s) 1-24 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) IEI Claim(s) 12A-24 is/are rejected. 

7) ^ Claim(s) 3,18 and 19 is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) ^ The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2.0 Certified copies of the priority documents have been received in Application No. . 

3.Q Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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1) £3 Notice of References Cited (PTO-892) 

2) n Notice of Draftsperson's Patent Drawing Review (PTO-948) 
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1. Claims 1-24 have been examined. 

Information Disclosure Statement 

2. The information disclosure statement (IDS) submitted on July 12, 2001 is in compliance with 
the provisions of 37 CFR 1.97. Accordingly, the information disclosure statement is being 
considered by the examiner. 

Specification 

The specification is objected to because of the following informalities: There is a 
typographical error in line 2 of paragraph 0053. The word "an" is unnecessary and should be 
deleted. Appropriate correction is required. 

Claim Objections 

3. Claims 18-19 are objected to because of the following informalities: In claim 18, there is a 
typographical error in line 1. The words "Claim 7" should be "Claim 17" and will be treated as 
such by the examiner. There is a similar typographical error in line 1 of claim 19 as well. The 
words "Claim 8" should be "Claim 18" and will be treated as such by the examiner. Appropriate 
correction is required. 

Claim Rejections - 35 USC § 102 

4. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 
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(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

5. Claims 1, 2, 4-24 are rejected under 35 U.S.C. 102(b) as being anticipated by Duxbury (U. S. 
Patent 5,347,578). 

6. With respect to claims 1, 9, and 17, Duxbury discloses a method (Figure 2; column 2, lines 4- 
8), system (column 2, line 4), and computer readable medium (column 2, lines 1-3) for extending 
and grouping actions and permissions for authorization of a requesting user to access or use a 
requested protected system resource in a computer system, said method comprising the steps of: 

Providing an access control policy associated with said requested protected system 
resource, said access control policy containing a permission list of permitted identities for use of 
said protected system resource (column 2, lines 10-14), said permission list containing at least 
one action group tag and associated action indicators (column 2, lines 58-68; column 3, lines 15- 
30); 

Evaluating said permission list according to a specific permission definition associated 
with said action group tag, said permission definition providing a correlation between 
permissible actions and members of a set of action indicators (column 4, lines 52-66; column 5, 
lines 15-39); and 

Granting authorization to perform actions on said requested protected system resource to 
said requesting user if said access control policy permission list includes an appropriate action 
indicator correlated to an action group tag (column 4, lines 66-68; column 5, lines 1-14). 
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7. With respect to claims 2, 10, and 18, Duxbury discloses a method further comprising 
providing in an access control policy permission list a plurality of action group tags, each action 
group tag having one or more associated action indicators, such that resultant granting of 
authorization to act on said requested protected object is completed if the requested action is 
allowed by any of the associated action indicators of any of the action groups (column 2, lines 
58-68; column 3, lines 15-30; column 4, lines 66-68; column 5, lines 1-14; column 5, lines 23- 
31). 

8. With respect to claims 4, 12, and 20, Duxbury discloses a method for managing permission 
indicators for computer system protected objects comprising the steps of: 

Providing a plurality of permission indicator containers in an Access Control 
List (column 3, lines 15-40; column 2, lines 58-61); 

Associating a first set of permission indicators with a primary permission indicator 
container (column 3, lines 15-40; column 2, lines 58-61); and 

Associating one or more additional sets of permission indicators with additional 
permission indicator containers such that permission indicators may be categorized and grouped 
logically to facilitate efficient and effective management of security policy (column 2, lines 4-14: 
The examiner interprets the umon database as having the same role and format as an Access 
Control List; column 3, lines 15-40). 

9. With respect to claims 5, 13, and 21, Duxbury discloses a method wherein said step of 
providing a first set of permission indicators comprises providing at least one other (additional) 
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permission indicator set having equivalent permission indicators to said first set such that 
permission indicators may be assigned unique permissive control according to a permission 
indicator container with which they are associated (column 3, lines 37-40, 49-60). 

10. With respect to claims 6, 14, and 22, Duxbury discloses a method further comprising 
providing a set of permission indicators wherein the indicators comprise the characters "a" 
through "z" and "A" through "Z" (column 3, lines 37-40: The examiner interprets "string of 
characters" to include both the upper- and lower-case characters of the alphabet.). 

1 1 . With respect to claims 7, 15, and 23, Duxbury discloses a method further comprising 
associating an action group tag with a permission indicator container (column 2, lines 35-45; 
column 3, lines 15-30). 

12. With respect to claims 8, 16, and 24, Duxbury discloses a method further comprising the 
step of providing an action group tag with an associated list of permission indicators in an 
Access Control List entry (column 2, lines 4-14, 29-68: The examiner interprets the umon 
database as having the same role and format as an Access Control List.). 

13. With respect to claims 1 1 and 19, Duxbury discloses a method further comprising software 
for reusing action group indicators among action groups such that each action group may define 
a unique implementation of each reusable action group indicator (column 2, lines 58-68; column 
3, lines 37-40, 49-60). 
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Allowable Subject Matter 



14. Claim 3 is objected to as being dependent upon a rejected base claim, but would be 
allowable if rewritten in independent form including all of the limitations of the base claim and 
any intervening claims. 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Ramya Ananthanarayanan whose telephone number is (571) 272- 
5860. The examiner can normally be reached on Monday through Friday, 8:30 -5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



Conclusion 



EMMANUEL LMOISE 
PRIMARY EXAMINER 




RA 



